IT Security Analyst

Location Requirements

• Candidates must have a primary address located within Michigan or be willing to move to Michigan.

The Data Security Analyst I manages, monitors, and maintains security access controls for an assigned set of users, systems, and applications. The person is responsible for a number of ongoing activities that serve to provide appropriate access to, and protect the confidentiality and integrity of, patient, provider, employee, and business information in compliance with organization policies and standards, regulatory requirements and sound business practices.

• (25%) Manage access privileges to systems, applications, and functions for assigned areas of responsibility, including understanding the business needs for designing/implementing security solutions.
• (25%) Report, review and audit adherence to established security policies and standards for assigned areas.
• (25%) Document security management procedures and communicate as necessary to others.
• (25%) Actively participate in security and access management planning meetings, project teams, and work groups as required. Continue to refine and improve security management practices and recommend new standards and approaches as warranted by changes in the environment.

• My Michigan Health is a technology‑driven organization and employees need to demonstrate competency in Microsoft Windows.
• An employee may be required to participate in further learning opportunities offered by My Michigan Health.

• Associate's degree is required.
• At least a Bachelor's Degree in a healthcare-related or information technology field, or a minimum of an Associate's Degree in the same areas with five years related experience including design and administration of security processes in an enterprise environment, is required.
• Three years of experience with healthcare information systems or involvement in an entire project life cycle is preferred.

• Ability to analyze, design, recommend, monitor and improve information security related processes in a positive manner, balancing information users’ needs to access systems and data with the need to maintain data integrity, confidentiality and reliability.
• Tuberculosis (TB) testing must be done as needed.
• Mandatory Occupational Safety and Health Administration (OSHA) training must be completed annually according to the Exposure Control Plan.

• Exposure to stressful situations, including those involving public contact, as well as trauma, grief and death.
• Ability to wear personal protective equipment that includes latex materials or appropriate substitutes if required.
• Ability to move freely about the facility with or without an assisted device and must be able to perform the functions of the job as outlined.
• Overall vision and hearing are necessary with or without assisted devices.
• Frequently required to sit, stand or walk for long periods of time; may require frequent postural changes such as stooping, kneeling or crouching.
• Some exposure to blood‑borne pathogens and other potentially infectious material; must follow My Michigan Health blood‑borne pathogen and TB testing as required.
• Ability to handle multiple tasks, work independently, maintain regular and predictable attendance, and stay awake.
• Overall dexterity is required, including handling, reaching, grasping, fingering and feeling; may require repetition of these movements on a regular to frequent basis.
• Physical demand level:
  Sedentary. Must be able to occasionally (0‑33% of the workday) lift or carry 0‑10 lbs.

My Michigan Health